$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: fjL2wvDlJjHyuAddHdpkZQR9VkR5YZJiby/jJPCKL7A= Subject key identifier: 21:2B:A4:84:72:A3:64:4B:C2:3B:77:10:72:9D:6E:D3:4E:DA:78:03 Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 07B5 Signing time: Fri 30 May 2025 21:33:02 +0000 Manifest this update: Fri 30 May 2025 21:33:01 +0000 Manifest next update: Fri 06 Jun 2025 21:33:01 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: /nIgjlkaXhsigtv1RA8h3wALXMbJHeJ4uF5kLMFuM/o=) 2: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (hash: +XIvNmYB/5EgcsxvZK5ch01j/uNHHViQProaEC6+kLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: May 30 21:33:01 2025 GMT Not After : Jun 6 21:33:01 2025 GMT Subject: CN=683a240d-5cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:ca:46:0c:3a:f7:59:93:24:70:83:b0:7e: 7d:f4:89:d0:67:a2:8f:b8:25:cf:b3:24:c5:f9:d1: ef:5d:9f:a8:90:d6:18:4c:18:dc:a9:4e:13:a0:a2: 14:e8:0a:c0:c3:60:96:b5:86:80:f1:4c:b6:1e:92: 17:26:dd:e8:9e:21:bd:d6:ac:ac:e3:9e:c6:2d:81: ae:ec:22:d1:df:fa:00:58:c1:26:2a:27:89:7b:99: df:53:23:44:85:50:f6:08:f1:a3:6c:24:0e:24:4c: f0:5d:3a:b6:7d:9e:f1:ec:47:1c:a2:40:21:18:57: 43:e9:b9:e4:29:50:a2:e8:85:e1:32:cd:1f:ae:f8: c5:8d:5b:b4:98:a0:9f:07:4d:15:6a:6e:92:35:8d: 1d:f1:78:6b:b5:9c:4a:d6:35:0f:6e:04:8e:cc:07: 04:82:6f:71:00:9e:8e:a3:14:e4:88:59:b6:4b:b2: 4f:fa:be:5c:af:f6:b2:23:41:5f:b8:69:47:7c:60: 2d:ca:82:08:b5:12:7b:a1:06:c4:7f:d8:ce:6a:81: 69:f8:97:6a:75:58:2d:eb:99:0b:a5:d0:c7:9f:a7: b5:b6:a2:c2:9f:d7:e6:89:55:7e:df:53:14:2b:a6: 9e:49:15:bb:ed:6e:dc:e5:b4:f6:61:fc:32:35:df: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2B:A4:84:72:A3:64:4B:C2:3B:77:10:72:9D:6E:D3:4E:DA:78:03 X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ec:d0:c0:c5:f2:80:1b:7f:21:a6:08:72:bc:38:ed:39:0e: e1:ae:6b:34:72:12:fc:2a:bb:b0:df:a1:ab:13:8b:70:38:e4: 2a:83:9f:ba:b2:45:61:25:86:ed:05:86:d7:5c:5d:15:0b:ec: 4f:45:75:ac:fa:13:2c:cc:c6:5b:2f:65:5c:d3:89:c8:e8:cf: b2:5e:71:59:fe:ed:07:8c:76:fa:83:37:83:e5:34:e5:15:ef: ac:22:91:26:86:8a:23:16:69:10:80:10:7d:5a:6c:e2:82:3a: eb:33:89:10:1f:ec:25:52:54:1f:64:bd:29:8c:a0:4d:cb:0a: d6:41:d7:bc:9b:b1:28:0d:47:a9:dc:2e:fc:b9:ab:0c:69:cf: fa:cc:17:b0:cc:c3:06:51:9d:c1:f9:22:3c:58:66:fd:35:b4: 60:92:9e:42:c8:8d:30:cb:a1:86:ee:71:96:33:45:a5:c9:9d: 3d:3b:62:8c:bb:bc:c1:23:ef:13:02:d7:b7:44:c8:e7:40:3c: af:be:24:28:fd:33:9b:2e:d4:94:6c:77:30:ae:65:6b:dc:8e: ad:51:05:57:72:32:45:f7:da:43:e0:ae:04:75:9e:ca:d6:46: 21:64:03:02:54:eb:06:9e:eb:01:f4:e6:52:dc:91:96:34:3c: a3:97:7c:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjUwNTMwMjEzMzAxWhcNMjUwNjA2MjEzMzAxWjAYMRYwFAYD VQQDEw02ODNhMjQwZC01Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSHKRgw691mTJHCDsH599InQZ6KPuCXPsyTF+dHvXZ+okNYYTBjcqU4ToKIU 6ArAw2CWtYaA8Uy2HpIXJt3oniG91qys457GLYGu7CLR3/oAWMEmKieJe5nfUyNE hVD2CPGjbCQOJEzwXTq2fZ7x7EccokAhGFdD6bnkKVCi6IXhMs0frvjFjVu0mKCf B00Vam6SNY0d8XhrtZxK1jUPbgSOzAcEgm9xAJ6OoxTkiFm2S7JP+r5cr/ayI0Ff uGlHfGAtyoIItRJ7oQbEf9jOaoFp+JdqdVgt65kLpdDHn6e1tqLCn9fmiVV+31MU K6aeSRW77W7c5bT2YfwyNd/KWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCErpIRy o2RLwjt3EHKdbtNO2ngDMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu7NDAxfKAG38hpghyvDjtOQ7hrms0chL8Kruw36GrE4twOOQqg5+6 skVhJYbtBYbXXF0VC+xPRXWs+hMszMZbL2Vc04nI6M+yXnFZ/u0HjHb6gzeD5TTl Fe+sIpEmhoojFmkQgBB9WmzigjrrM4kQH+wlUlQfZL0pjKBNywrWQde8m7EoDUep 3C78uasMac/6zBewzMMGUZ3B+SI8WGb9NbRgkp5CyI0wy6GG7nGWM0WlyZ09O2KM u7zBI+8TAte3RMjnQDyvviQo/TObLtSUbHcwrmVr3I6tUQVXcjJF99pD4K4EdZ7K 1kYhZAMCVOsGnusB9OZS3JGWNDyjl3xJ -----END CERTIFICATE-----Generated at Sat May 31 14:49:40 2025 by rpki-client